Overview
overview
7Static
static
3Valhalla.D...en.exe
windows11-21h2-x64
7Valhalla.D...en.exe
windows11-ltsc_2024-x64
7$TEMP/BASSMOD.dll
windows11-21h2-x64
3$TEMP/BASSMOD.dll
windows11-ltsc_2024-x64
3$TEMP/R2RJUCE.dll
windows11-21h2-x64
3$TEMP/R2RJUCE.dll
windows11-ltsc_2024-x64
3$TEMP/keygen.exe
windows11-21h2-x64
3$TEMP/keygen.exe
windows11-ltsc_2024-x64
3Valhalla.D....1.exe
windows11-21h2-x64
7Valhalla.D....1.exe
windows11-ltsc_2024-x64
7HEXWARS/Va...en.dmg
windows11-21h2-x64
3HEXWARS/Va...en.dmg
windows11-ltsc_2024-x64
3Valhalla K...keygen
windows11-21h2-x64
3Valhalla K...keygen
windows11-ltsc_2024-x64
3Valhalla K...chaos!
windows11-21h2-x64
3Valhalla K...chaos!
windows11-ltsc_2024-x64
3ValhallaVi..._1.pkg
windows11-21h2-x64
3ValhallaVi..._1.pkg
windows11-ltsc_2024-x64
3General
- Target Valhalla.DSP.Valhalla.VintageVerb.v1.7.1.(Mac-Win) Incl.Patched.and.Keygen-R2R.zip
- Size 10.7MB
- Sample260801-fy9b6sec63
- SHA256 412f55a03ff90d54e6f8f0c8bc6bb5ab6780f1f0947110d5a067c53217664b4a
- MD5 c8cc3f45b1cb2eb7354d7afbca2686c0
- SHA1 2db6b1ce2180af48a03d859e300270885398a1d4
- SHA512 8cad8c7df6cf629f23932fd0cb7933fdf53e7f50e3ccf2f91a299a33ee1271feb4f3fb8d2c725f45ddb1befdeb995ef4392bc3d1c70f24d2aa4f4098b034ec98
- SSDEEP 196608:3CFGSBPvgoqrJCr1/VAJaG7K00QoizZBMB2o0MZDqWZmB:0GSBHWrArNVEa1lQoicB2o0SD3G
- TLSH T1A8B6338FC9A5EA7F3D5A1BAD7DA844873964F72DB5C11B81A1DFBB1C041C442B3A821C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Valhalla.DSP.Valhalla.VintageVerb.v1.7.1.(Mac-Win) Incl.Patched.and.Keygen-R2R/R2R/ValhallaDSP_KeyGen.exe
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
Valhalla.DSP.Valhalla.VintageVerb.v1.7.1.(Mac-Win) Incl.Patched.and.Keygen-R2R/R2R/ValhallaDSP_KeyGen.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$TEMP/BASSMOD.dll
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
$TEMP/BASSMOD.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$TEMP/R2RJUCE.dll
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
$TEMP/R2RJUCE.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$TEMP/keygen.exe
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
$TEMP/keygen.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Valhalla.DSP.Valhalla.VintageVerb.v1.7.1.(Mac-Win) Incl.Patched.and.Keygen-R2R/Setup Valhalla VintageVerb v1.7.1.exe
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
Valhalla.DSP.Valhalla.VintageVerb.v1.7.1.(Mac-Win) Incl.Patched.and.Keygen-R2R/Setup Valhalla VintageVerb v1.7.1.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
HEXWARS/Valhalla Keygen.dmg
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
HEXWARS/Valhalla Keygen.dmg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Valhalla Keygen/Valhalla Keygen.app/Contents/MacOS/keygen
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
Valhalla Keygen/Valhalla Keygen.app/Contents/MacOS/keygen
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Valhalla Keygen/Valhalla Keygen.app/Contents/Resources/chaos!
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
Valhalla Keygen/Valhalla Keygen.app/Contents/Resources/chaos!
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
ValhallaVintageVerbOSX_1_7_1.pkg
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
ValhallaVintageVerbOSX_1_7_1.pkg
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target Valhalla.DSP.Valhalla.VintageVerb.v1.7.1.(Mac-Win) Incl.Patched.and.Keygen-R2R/R2R/ValhallaDSP_KeyGen.exe
- Size 536KB
- SHA256 5c4f368d0515078ce5e6f78df59740591554fb7cbca6f298399ef0b4c28d9a05
- MD5 7f1b439e8f0f57c995a3244dbd67a86b
- SHA1 43f57b1bf43ceaf709235cd86eae0361d05acafd
- SHA512 fe929109cf2f89e89722793bb5c678bc14b88dc1f7b6939553311e13df67c5f0a0f62a2c71737e3ae58db7fe65cfcfc29baa63eb170cbf4320223f3f139716f9
- SSDEEP 12288:sc9t2SllUjJUgMZwixstqkYoH9huVF8eXdBJ+DB:scLyNhwsLbWVF8eX8V
- TLSH T114C41252AA688EE7C6BB477015FBDE213AFA3D1195A6194B73947B34F633202700B5C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $TEMP/BASSMOD.dll
- Size 33KB
- SHA256 8ad9e47693e292f381da42ddc13724a3063040e51c26f4ca8e1f8e2f1ddd547f
- MD5 e4ec57e8508c5c4040383ebe6d367928
- SHA1 b22bcce36d9fdeae8ab7a7ecc0b01c8176648d06
- SHA512 77d5cf66caf06e192e668fae2b2594e60a498e8e0ccef5b09b9710721a4cdb0c852d00c446fd32c5b5c85e739de2e73cb1f1f6044879fe7d237341bbb6f27822
- SSDEEP 768:qQmS5iUgi5czW+DlrQOS1DeDdjgNtbX4O6DHix84H0:qQz5Tgof+DdpS1+djctLSHiZ0
- TLSH T130F2E1B43B18CDE2DDC807F41FE4E6A879DB92026A13DBC5D697CA97328B4914D42F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/R2RJUCE.dll
- Size 294KB
- SHA256 b4a6cab1de8cdc2b704f0bcc34d51644d82ecda4aa346dba232cd7623786f3a9
- MD5 66d3dc009d5cfeb5157ddc08dc5443d0
- SHA1 b8416a1bcac62ab882900e8298dc8e66dfdb8e96
- SHA512 cdbf1f11f491a91e53e46243256bfc8b07450102fc41b0114ae8a65c08b23f6d0782f11393a6b69ff4906e565707bdc30cce15b5e7a39cfb8e12258ae1ee8811
- SSDEEP 6144:y2y9fytBg/nDX1fjOkOM005kBFmKeAOzGTBFUROpE9o:wViBg/nDXhq/05kBMH1GTHxpE9o
- TLSH T174549F01F493C073C27E15305EB9BA551ABE78700AB499BF7BD84E1E4E741D0B722AA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/keygen.exe
- Size 661KB
- SHA256 2b6c17e56e38a32a8d15f65cfbfd8784cdf0f992724ed0d5214a7482d466db04
- MD5 0c2b114132ffe0a6d244c492fcc31b0c
- SHA1 2a2ae26101c343f6bb0b2a235ed1a0165a580fb4
- SHA512 857602851f7675a3b63b46d72e9d7e53725b035ad057773506af8abf976c7d8249eac6268ef32b9b6356b09a209f430f385c2c4fbbd2e9d9b835e11c122000af
- SSDEEP 6144:tPA4GcGvY6Q4rOQonRBVSszRNAOWLxnMMY6xY15XGB+K:tpGVQ4KQonRBVrzRNj725
- TLSH T1F4E4E77501B3AFA4EA37B37B7B9901C49E8429F7FE1ACC561938E0D8380DC9356A6153
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Valhalla.DSP.Valhalla.VintageVerb.v1.7.1.(Mac-Win) Incl.Patched.and.Keygen-R2R/Setup Valhalla VintageVerb v1.7.1.exe
- Size 2.9MB
- SHA256 5bd134a71db1d1afe9ae112855f198a673929c53712522d610eb4c509fe26142
- MD5 4e98dc598292e286939a2632287766af
- SHA1 5cc57a2e71cf6eb83918646d178c307e2f0a10b6
- SHA512 4d5c10d45c747a380b0bd5d32cecaef27db167b3b3112e4442b3196ca092d0484a3f3cd2f022a1f4753132974994c64503536a7b4cb4baf014c474d954b627c4
- SSDEEP 49152:84Mq3FMrIRkRZO38IfEWOj01o/JEHTyoXDJt+8np64wYv8B+veYkBikhMpe/K7U:A6arRqfBScoa2CfRnQkvsLYTkSpeAU
- TLSH T1B3E53303F7C740B5F8351E7CC829C8846DABF96925F1A1152DB8E20E487D9D6EEB2B50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target HEXWARS/Valhalla Keygen.dmg
- Size 2.3MB
- SHA256 614cfebae6e6eafa1a281b620f0cf4e7def47a2f7b13685d167c06b3c4e5ba1c
- MD5 8594dc0dd15b71eb6765f5057e1d67b9
- SHA1 67fd5c81442fce418d8f166e4bbac6e597c04fd6
- SHA512 718df92de24efc2b4fab87138d000c7eaafb98c34693ca15b4b553e34c9c673da489fa0045b369d2d73e03852c883d3c718b5885d87f828892fa982fa0d35977
- SSDEEP 49152:ESA1BCe8nH+LUZgRQBwYSwSV8gsJ7+GRhuBamx27u44e+DZgQsG8UWb4I6m:VACHQvRGSHV8gsJ7hcIubdgJG8lR6
- TLSH T19BB533BA60E83667DCECDA309A12D5E60C310DFF91E21BD4B28FE65C15ABBC3511891D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Valhalla Keygen/Valhalla Keygen.app/Contents/MacOS/keygen
- Size 70KB
- SHA256 045f7a68578437b4a9a300c3afe76ee1a3003c171433b0be9b0573d015a0bf59
- MD5 5f095f102f55094ebfff8c98cd47f656
- SHA1 a39a3f0888948d7de0dd18357e636d90e4052445
- SHA512 96e94933d6cb6268c08287964bc09da3825a5c4d0b4dc5f197662b0cb3def04b0e9a78c2de41a78006a30b44e5652c485cad9754edb439667ea5134c873d1abc
- SSDEEP 1536:WsrSt0XeJQDqlsvWBTiOqIhep/fhZhAYV/CxMnNjYGqTX:nOqIhe5fhZhAYV/CxMn5O
- TLSH T18B63F827BB50440BC2CF4238C22F4715D2F9FB64CF60B25B19A5E6599FE1AA34E06E47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Valhalla Keygen/Valhalla Keygen.app/Contents/Resources/chaos!
- Size 72KB
- SHA256 a9f44eb186650de89bb86f3dc7e9d6ba461cc016784ae75b4a9455a746abdb91
- MD5 85735bd7759a199992aea4de573842c5
- SHA1 e48c479bd50ecc26d82aa4373d004797d598f5c1
- SHA512 09fb3afe74f146be24e4295f8b825d94b2c286ed5aef3ae190490cfbde7528c17388f86c1e9599557e7edac949eb06df753a4444c7bf206b91bc61242a1e98b7
- SSDEEP 1536:UVBxNyrEQbQkj6jFs9dAvGteEoHpUmViGZ8c5EkbSz:UVvNyrdb0Fs9dAvEVQo29Kk8
- TLSH T1A173D866FB508461E50C40788E1F8778C265FDF50209B1AB7EBEF7085FBA5620B4536B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ValhallaVintageVerbOSX_1_7_1.pkg
- Size 5.1MB
- SHA256 20948e0d3eaa225baa74769ada2826dc1ac0d45cf553288e8ff26a8dcc0c22ab
- MD5 5a6d12c47ee3d2e92a1f651088771e93
- SHA1 54baadb16fc7ad27f6637cef433383992d3a6881
- SHA512 b139a660725d82ade6abb440a2be7c66a1ded84049d44f60b75ffd1dbe33b7e5dfd49f09d3ecad16034554242cd2242598fd60b06605e5b271d04ff7501d9955
- SSDEEP 98304:YSEirKmfwBkDVAQe0iS7h5Xt0dtBGHqHKc+Si+BDZOAFfIeP8vkgNTAFGlp:FROB7dS7hFoGHRc3BFHfpEv9TAklp
- TLSH T1EB4633C5E2FACD9B2E016A2F6DFB10C22D25A775FD8503331EDB9D9881C441AD7B9260
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10